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FEATURES 



• Programmable DES ciphering modes 

□ Electronic codebook (ECB) 

□ Cipher block chaining (CBC) 

□ 1-, 8-,or 16-bit cipher feedback (CFB) 

□ Output feedback (OFB) 

• Ciphering rates of 235,000 operations/second 
for any of the DES modes. Data throughput of 
1.882 Mbytes/s using 64-bit DES output block 

• On-chip RAM and ROM program memory 



• Flags readable on the data bus or independent 
output pins 

• Four sets of key and inital value registers 

• Separate plain text and cipher text parallel 
(8-bit) ports 

• Separate plain text and cipher text serial ports 

• Separate serial key input port 

• ECB program available in ROM 



DESCRIPTION 

The T7000A Digital Encryption Processor (DEP) is a programmable integrated circuit that provides a 
low-cost ? high-security 3 cryptographic system for encrypting and decrypting digital signals. It is 
manufactured using CMOS technology, requires a single 5 V supply, and is supplied in a 40-pin plastic 
DIP. It implements four data encryption standard (DES) modes and is capable of performing multiple 
encryption operations or multiplexed key and initial value ciphering. 
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Figure 1. T7000A Digital Encryption Processor Block Diagram 

The information contained in this document is preliminary and subject to change without notice. 
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as a result of their use or application. No rights under any patent accompany the sale of any such product or circuit. 
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Figure 2 8 T7000A DEP Pin Function Diagram and Alphabetical Listing of Symbols 



Table 1. T7000A Pin Descriptions 


Pin 


Symbol 


Type 


Name/Fiimetioiia 


1 


SPA 


I 


Slave Port Address. When high (1), the contents of the status register can 
be read, but not written, to the slave port data bus. When low (0), either 
the input shift register (ISR) or output shift register (OSR) is accessed, 
depending on the port configuration programmed. 


2 
3 


MPAO 
MPAl 


I 
I 


Master Port Address Bits and 1. Used with MPA2 (pin 5) for internal 
register selection. 


4 


SPR 


I 


Slave Port Read. Used with SPA (pin 1) to read from the output shift 
register (if the slave port is programmed as an output) or from the status 
register. Data is available on the slave port data bus following the falling 
edge of the pulse and remains on the bus as long as the SPR is low (0). 
SPW (pin 6) should be held high during a read pulse. 


5 


MPA2 


I 


Master Port Address Bit 2. Used with MPAO and MPAl (pins 2 and 3) 
for internal register selection. 
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Table 1. T7000A Pin Descriptions (Continued) 


Pin 


Symbol 


Type 


Namme/Fwnetroifl) 


6 


SPW 


I 


Slave Port Write. Used with SPA (pin 1) to write to the input shift register 
if the slave port has been programmed as an input. The data input is 
latched on the rising edge of the write pulse. SPR (pin 4) should be held 
high (1) during the write pulse. 


7 


MPR 


I 


Master Port Read. Used with the master port address bus to read one of 
the internal registers. Data is available on the master port data bus 
following the falling edge of the pulse and remains on the bus as long as 
MPR is low (0). MPW (pin 8) should be held high (1) during the read 
pulse. 


8 


MPW 


I 


Master Port Write. This lead is used with the master port address bus to 
write to one of the internal registers. The data input is latched into the 
addressed register on the rising edge of the write pulse. The MPR lead 
should be held high during the write pulse. 


9 


SFLG 





Slave Flag. This active-high output indicates the status of either the input 
or output shift registers, depending on the port configuration programmed . 
If the slave port is programmed as an input, the slave flag reflects the 
contents of the ISRFULL flag (status register - bit 4). If the slave port is 
programmed as an output, then the slave flag reflects the contents of the 
OSREMPTY flag (status register - bit 5). Both of these conditions can be 
read from the status register. 


10 


MFLG2 





Master Flag 2. This active-high output indicates the status of the 
ISRFULL flag (status register — bit 4) . This condition may also be read 
from the status register*. 


11 


MFLG1 





Master Flag 1. This active-high output indicates the status of either the 
input or output shift register, depending on the port configuration 
programmed*. If the master port is programmed as an input, this lead 
reflects the contents of the ISRFULL flag (status register - bit 4). If the 
master port is programmed as an output, this pin indicates the contents of 
the OSREMPTY flag (status register - bit 5). If the master port is 
programmed as both input and output, this pin indicates the contents of the 
OSRFULL flag and MFLG2 (pin 10) indicates the contents of the 
ISRFULL flag. The status of the input and output shift register can also 
be read from the status register. 


12 


Vdd 


— 


5 V Supply. 


13 
14 
15 
16 
17 
18 
19 
20 


MPD7 
MPD6 
MPD5 
MPD4 
MPD3 
MPD2 
MPD1 
MPDO 


I/O 
I/O 
I/O 
I/O 
I/O 
I/O 
I/O 
I/O 


Master Port Data Bit 7. 

Master Port Data Bit 6. 

Master Port Data Bit 5. Bidirectional, 

Master Port Data Bit 4. 8-bit Master Port 

Master Port Data Bit 3. I/O bus. 

Master Port Data Bit 2. 

Master Port Data Bit 1. 

Master Port Data Bit 0. 



Sec Table 5 
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Table 1. T7000A Pin Descriptions (Continued) 


Pin 


Symbol 


Type 


Name/Function 


21 
22 
23 
24 
25 
26 
27 
28 


SPD7 
SPD6 
SPD5 
SPD4 
SPD3 
SPD2 
SPDl 
SPDO 


I/O 
I/O 
I/O 
I/O 
I/O 
I/O 
I/O 
I/O 


Slave Port Data Bit 7. 

Slave Port Data Bit 6. 

Slave Port Data Bit 5. Bidirectional, 

Slave Port Data Bit 4. 8-bit Slave Port 

Slave Port Data Bit 3. I/O bus. 

Slave Port Data Bit 2. 

Slave Port Data Bit 1. 

Slave Port Data Bit 0. 


29 


vss 


— 


Ground. 


30 


vss 


— 


Ground. 


31 


SKREQ 





Serial Key Request. This active-low output indicates the DEP is expecting a 
key input. Active when IO Serial Act is programmed. The condition of 
this flag can be read from the status register. 


32 


ACTIVE 


o 


This active-high output flag is set by the microcode instruction IO ACT. 


33 


PF 





Parity Fail. When this output is low it indicates that one or more key input 
bytes had even parity. This flag is set on the 8th MPW pulse (pin 8) when 
the key is loaded through the parallel master port and on the 64th SKCLK 
pulse (pin 38) when the key is loaded serially. The status of this flag can 
be read from the status register. 


34 


CLKIN 


I 


Clock Input. The clock signal input at this lead determines all internal 
timing. A microcode instruction is executed every two clock cycles. The 
master and slave ports' read and write signals are not required to be 
synchronous with this clock signal. The frequency range of this clock is 10 
kHz to 8 MHz. 


35 


SPSD 


I/O 


Slave Port Serial Data. Depending on the programmed port configuration, 
used to write data to the input shift register or read data from the output 
shift register. The first bit read or written is the most significant. When 
this port is selected by the port configuration register, the slave port signals 
SPW, SPR, and SFLG (pins 6, 4, and 9) are used for control. This port 
may not be used to read or write to any of the other six registers. 


36 


MPSD 


I/O 


Master Port Serial Data. Depending on the programmed port 
configuration, used to write data to the input shift register or read data 
from the output shift register. The first bit read or written is the most 
significant. When this port is selected by the port configuration register 
and master port address is addressed, the master port signals MPW, MPR, 
MFLG1, and MFLG2 (pins 8, 7, 11, and 10) are used for control. 


37 


SKD 


I 


Serial Key Data. This input port is used to load key variables serially. The 
data on this pin is latched into key memory on the falling edge of the serial 
key clock during the execution. of a serial load key program. The key is 
entered with the most significant bit first and every 8th bit is treated as an 
odd parity bit. A parity failure will not prevent the 56-bit key from being 
loaded. 
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Table 1. T7000A Pin Descriptions (Continued) 


Pin 


Symbol 


Type 


Name/Function 


38 


SKCLK 


I 


Serial Key Clock. This clock is used to latch key data into key memory. 
Data is latched on the falling edge of the clock. The key input circuitry is 
inhibited after the 64th clock is received. 


39 


SCS 


I 


Slave Chip Select. This active-low input enables the slave port inputs and 
outputs. When high, all slave port outputs are placed in a high-impedance 
state. The SPW, SPR, SPSD, and SPD0-SPD7 signals are affected. 


40 


MCS 


I 


Master Chip Select. This active-low input enables the master port input 
and output leads. When high, all master port outputs are placed in a high- 
impedance state and all inputs are disabled. The MPW, MPR, MPSD, and 
MPD0-MPD7 signals are affected. 



Overflew 

Figure 1 is a block diagram of the DEP device. There are three major sections: the ciphering hardware 
and peripheral circuitry, the controller and program memory, and the ports. 

The ciphering hardware contains a high-speed hardware implementation of the National Bureau of 
Standards Data Encryption Algorithm (DEA) and the necessary hardware to configure the DES operating 
modes (see Figure 3). Both the key schedule and DES enciphering circuitry are part of the DEA 
algorithm. The remaining circuitry (seven multiplexers, an exelusive-OR gate, and a latch) is used for the 
DES operating modes. An input shift register (ISR), four key registers, four initial value registers, and an 
output shift register (OSR) support the ciphering hardware. 

An Internal hardware controller executes a 22-bit machine instruction every two clock cycles, thereby 
setting up the ciphering multiplexers and clocking the appropriate registers. Within the controller, a 
program counter is used to address the machine instruction stored in either RAM or ROM program 
memory. On-chip ROM (29 x 22 bits) contains a subroutine controlling the DES hardware, a load initial 
value program, a load key program, a serial load key program, and an ECB encrypt and decrypt program. 
These short programs are located at hexadecimal address 00 through 1c (see Figure 5). User accessible 
on-chip RAM (32 x 22 bits) allows the user to tailor the ciphering operation to meet system requirements 
and eliminate external hardware. These ciphering programs must start at hex address 20 and may not 
exceed hex address 3f . 

Master ami slave ports are provided so that the plain text and cipher text can be on separate buses. These 
ports have both serial and 8-bit parallel bidirectional data buses. When using the 8-bit parallel data bus, 
master or slave, the most significant data or key byte should be written/read first. In the serial mode, the 
most significant bit is written/read first. 

Registers 

Eight addressable, internal registers control device operation. Table 2 shows the register assignments for 
both the master and slave ports during either a read or write operation. 

Both the Input ami output shift registers (master or slave port address 0) may be accessed from MPD, 
MPSD, SPD, or SPSD. The input shift register (ISR) is a 64-bit, write-only, shift register. The output 
shift register (OSR) is a 64-bit, read-only, shift register. The port configuration register controls which 
port, master or slave, is associated with the input or output shift register. These shift registers are used to 
input and output data and would not normally be accessed until the other registers are loaded. 
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Table 2. Register Assignments 


Master Port (MP) 


MP Address 


Register 


Size (Bytes) 


(Write) 
(Read) 


Input Shift 
Output Shift 


8 
8 


1 

2 
3 


Status 

Port Configuration 

Mode Control 




4 
5 
6 


Ml 
M2 
M3 




Slave Port (SP) 


SP Address 


Register 


Size (Bytes) 


(Write) 

(Read) 

1 (Read) 


Input Shift 
Output Shift 
Status 


8 
8 
1 



If a parallel port is used, 8 bytes are read or written to empty or load these registers, except when the 1- 
or 8-bit cipher feedback (CFB) mode has been programmed. In these cases a single byte is expected. For 
1-bit CFB, only the most significant bit of the byte is used. 

If a serial port is used, 64 bits are read or written to empty or load these registers, except when the 1- or 
8-bit CFB mode has been programmed. One bit is expected for 1-bit CFB and eight bits for 8-bit CFB. 

The status register (master or slave port address 1) may be read or written from the master port data bus 
or read only from the slave port data bus (see Figure 4). 



The values are loaded into 



Bits 1 and (QA1, QAO) are read/write address lines that are used to select key and initial value register 
pairs 0—3 when the microcode instruction bit INT is not set. Key and initial value registers are matched 
sets, i.e., 00 selects key register and initial value register (see Table 3). 
these registers by executing the appropriate program in ROM. 

Bit 2 of this register is not used. 



Bit 3 is a read-only, active-high, serial key request (SKREQ) flag. The complement of this flag (SKREQ) 
is available at output pin 31. SKREQ is microcode-controlled and goes active when the SERIAL and 
ACT instructions are executed simultaneously. 

Bit 4 is a read-only, active-high, input shift register full (ISRFULL) flag. This flag appears on an output 
pin; the specific pin (MFLG1, MFLG2, or SFLG) is determined by the port configuration. An active 
signal indicates that the ISR is full and additional information written to that register is ignored. The 
ISRFULL flag is set automatically whenever the mode control register is written or after the microcode 
instruction SISRFOSRE is executed. It is cleared by microcode instruction CLISRF. 
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Figure 4. Status Register 



Table 3. Key and Initial Value Register Addresses 


Bits 


Key and Initial Value 
Register Number 


QA1 


QAO 




1 
1 



1 


1 



1 

2 
3 



Bit 5 is a read-only, active-high, output shift register empty (OSREMPTY) flag. This flag appears on an 
output pin; the specific pin (MFLG1 or SFLG) is determined by the port configuration. An active signal 
indicates that the OSR is empty and additional attempts to read that register are ignored. OSREMPTY 
is set automatically whenever the mode control register is written or after the microcode instruction 
SISRFOSRE is executed. It is cleared by the microcode instruction CLOSRE. 

Bit 6 is a read-only, active-high, activity (ACTIVE) flag. This flag also appears on output pin 32 
(ACTIVE). It is set by the microcode instruction IO ACT and indicates processor activity. The 
ACTIVE flag has no effect on device operation. 

Bit 7 is ajead-only, active-high, parity fail flag. The complement of this flag is available at the output 
pin 33 PF. This flag is latched whenever the WKEY instruction is executed. An active condition 
indicates that one or more of the key bytes entered had even parity. Device operation is not inhibited by 
the parity fail flag. 

The port configuration register (master port address 2) is a read/write register accessible only through the 
master port data bus. Table 4 defines the possible port configurations and associated hex code for data 
encryption and decryption. 

The conditions indicated by the master and slave port flags are determined by the port configuration (see 
Tables). 

Bit 7 of the port configuration register is an input flag which is tested by microcode instruction LT?. This 
bit may be used to indicate the order in which the key schedule is used (encrypt or decrypt) or as a 
general-purpose conditional jump. 

The mode register (master port address 3) is a read/write register accessible only through the master port 
data bus. This register is used to address on-chip memory for read/write operations and to begin program 
execution. Only the six least significant bits are used in this register. 
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Table 4. Port Configuration (MP Address = 2) 


Port Type 


Input 


Output 


Hex Code* 


Encrypt 


Decrypt 


Parallel 
Parallel 
Parallel 


MPD 

SPD 

MPD 


SPD 

MPD 

MPD 


04 
11 
01 


84 
91 
81 


Serial 
Serial 


MPSD 
SPSD 


SPSD 
MPSD 


28 
62 


A8 

E2 


Parallel to serial 


MPD 


SPSD 


08 


88 


Serial to parallel 


SPSD 


MPD 


61 


El 



* The most significant bit in the hex code for the port 
configuration is an input flag. It is tested by the microcode 
mnemonic LT?. In the microcode for the standard modes given 
in this document, this bit is tested to determine the order in 
which the DES key schedule should be used (encrypt or 
decrypt) . 



Table 5. Master and Slave Port Flag Conditions 


Port Configuration 


Flag Condition 


Input 


Output 


MFLG1 


MFLG2 


SFLG 


MPD or MPSD 


SPD or SPSD 


ISRFULL 


— 


OSREMPTY 


SPD or SPSD 


MPD or MPSD 


OSREMPTY 


— 


ISRFULL 


MPD 


MPD 


OSREMPTY 


ISRFULL 


— 



To run a microcode program, write the starting address for the set of instructions to be executed into the 
mode register. On the next instruction cycle, this address is loaded into a program counter and execution 
begins. 

To read/write the program memory, the address of the instruction is loaded into the mode control register 
and one of the three h ex bytes (Ml, M2, or M3) which make up an instruction is read/written on a 
subsequent MPR/MPW pulse. Ml, M2, or M3 is selected using the master port address bus. 

The Ml, M2, and M3 registers (master port addresses 4—6, respectively) are accessible only through the 
master port data bus. These three bytes define a 22-bit microcode instruction stored in on-chip program 
memory. The two most significant bits of register M3 are not used. 

Operation 

It is important to use the following operating sequence with the DEP. Deviations from this sequence (e.g., 
loading the key before loading the ciphering program) may cause unpredictable results. 

1 . Load the ciphering program 

2. Configure the ports 

3. Load key and initial value register data 

4. Execute the program 
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Load the Ciphering Program. The user may enter the microcode instructions for any of the DES mode 
programs (Figures 6—8), multiple programs 9 multiplexed programs, or his own unique cipher program. 
Thirty-two 22-bit instructions, starting at hex address 20, can be entered. Microcode instructions are 
loaded into RAM, a byte at a time, through the master port data bus to the address designated by the 
mode control register. The microcode address is first written to the mode control register (MP address 3), 
followed by the three hex bytes (Ml, M2, and M3). These three bytes (MP addresses 4-6, respectively) 
constitute a 22-bit instruction. 

Configure the Ports. Data flow, port selection, and the DES key schedule selection (encrypt and decrypt) 
are programmed by writing the appropriate hex code to the port configuration register (MP address 2). 
Table 4 shows the various port configuration options. 

Load Key and Initial Value Register Data. There are four key and initial value registers that must be 
externally loaded. A key/initial value register address is written to the status register (see Tables 2 and 3 
and Figure 4) and the load initial value program or one of the two load key programs is executed. The- 
following is a description of the load key and initial value programs. The assembly language listings for 
these programs are shown on Figure 5. 

After writing the starting address of the load initial value program (hex address 06) to the mode control 
register, the ISRFULL flag becomes inactive and the ACTIVE flag goes active. The eight initial value 
bytes may then be written to the input shift register through the master port data bus. After the eighth 
byte is written, the ISRFULL flag goes active and the content of the input shift register is copied to the 
addressed initial value register. The next internal machine instruction clears the ACTIVE flag. 

After writing the starting address of the parallel load key program (hex address Ob) to the mode control 
register, the ISRFULL flag becomes inactive and the ACTIVE flag goes active. The eight key bytes may 
then be written to the input shift register through the master port data bus. After the eighth byte is 
written, the ISRFULL flag goes active and the content of the input shift register is copied to the 
addressed key register. Coincident with the program's WKEY instruction, the PARITY FAIL flag is set 
active high if any of the key bytes entered had even parity. The next internal machine instruction clears 
the ACTIVE flag. 

After writing the starting address of the serial load key program (hex address 10) to the mode control 
register, the ACTIVE and serial key request (SKREQ) flags become active. The 64-bit key must then be 
clocked into the input shift register through the serial key port. After the last bit is entered, the content of 
the input shift register is copied into the addressed key register. One internal machine instruction cycle 
after the key is entered, the ACTIVE and SKREQ flags. become inactive. Coincident with the program's 
WKEY instruction, the PARITY FAIL flag is set active high if any of the key bytes entered had even 
parity. 

Execute the Program. After loading the microcode program, setting up the desired port configuration, and 
loading the key and initial value registers, the device is ready to begin a ciphering operation. The starting 
address of the microcode program is written to the mode control register. On the next internal machine 
cycle, this address is loaded into a program counter and execution begins. To execute the ECB mode, no 
microcode has to be loaded since it already exists in ROM. For this DES mode, step 1 should be omitted. 

Input and output to the DEP device does not have to be synchronous with the input clock. The ISRFULL 
and OSREMPTY flags signal the host processor to write and read data. When these flags are inactive, 
data may be loaded into the input shift register and read from the output shift register by the port 
associated with these registers. These flags, tested in program memory by conditional machine 
instructions, 
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determine when to start or stop ciphering data. A typical ciphering program would contain the steps: 

1. Multiplexer setup 

2. Wait for input data 

3. DES subroutine call 

4. Wait until previous output data has been read 

5. Latch output data and return to step 2 

DES Mode Descriptions 

The DEP is capable of performing all four DES operating modes: electronic codebook; cipher block 
chaining; 1-, 8° or 64-bit cipher feedback; and output feedback. Code for the ECB mode is stored in 
ROM beginning at location hexadecimal 12. The DEP may be programmed for the other modes via the 
RAM. Each mode can be used independently, combined with another mode, or used with multiple keys. 
For a detailed description of the DES modes refer to Federal Information Processing Standards 
PwblkaftMMiB 81. 

The electronic codebook (ECB) mode is primarily used to encrypt or decrypt keys or initial values through 
the use of a master key. It is a direct implementation of the DES algorithm. A 64-bit input data block 
results in a 64-bit output block. Consecutive data blocks are cryptographically independent. Figure 5 
(Part 2 of 2) contains the assembly language listing for the ECB mode beginning at hexadecimal address 
12. 

The cipher block chaining (CBC) mode uses the DES algorithm in a 64-bit feedback mode resulting in 
consecutive output data blocks being cryptographically dependent. This dependence provides an error 
extension characteristic useful in protecting against an active system attack. Figure 6 contains the 
assembly language listing for the CBC mode. 

The cipher feedback (CFB) mode is an additive stream cipher in which the DES algorithm is used to 
generate pseudo-random blocks. This mode provides cryptographic dependence of data blocks and error 
extension. It is not necessary that the input block be 64 bits. The input block may be 1, 8, or 64 bits. If 
the 1- or 8 -bit mode is selected, a DES operation must be performed for every input bit or byte; 
consequently the data rate is reduced by a factor of 64 or 8, respectively. Figure 7 contains the assembly 
language listings for 1-, 8-, and 64-bit CFB modes. 

The output feedback (OFB) mode uses the DES algorithm as a pseudo-random number generator. 
Encryption and decryption are identical operations and the security of the algorithm is dependent on the 
proper management of the initial value blocks. This mode has no error extension property; a 1-bit 
transmission error results in a 1-bit decryption error. This is an important property when transmitting 
over a noisy channel. Figure 8 contains the assembly language listing for the OFB mode. 

These standard DES modes, after setup, may be executed in a minimum of seventeen instructions. With 
an 8 MHz input clock the instruction period is 250 nanoseconds, yielding a maximum of 235,000 ciphering 
operations per second. If the entire output block (all 64 bits) is used, the data throughput rate is 1.882 
Mbytes/s. 

Multiple encryption can be easily implemented with the DEP device. Using different keys, any of the 
previously mentioned DES modes can be cascaded to provide multiple encryption. 

Figure 9 contains the assembly language listing for the ECB mode using 3 keys for encryption and 
decryption. Decryption is similar to encryption with the key schedules used in reverse order and the last 
key register used for encrypting used first for decrypting. 

In addition to the four DES operating modes, multiple modes, and multiplexed modes, the user may 
choose to program a unique encryption method. 
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Figure 5 (Part 2 of 2) contains an assembly language listing (in ROM) for the ECB DES mode. Figures 
6—9 contain assembly language listings for three DES modes and multiple key ECB. Each listing in 
Figures 6-9 begins at RAM hexadecimal address 20. When combining programs, program labels may 
have to be changed to prevent incorrect addressing. Also, duplicate code in some programs may be 
combined. 



Parallel Load Key 

b 1 b 3 



c 
d 
e 
f 



1 

8 




la 
15 
lc 
14 




d 

f 



Serial Load Key 

10 1 b 



D 








D 








R 


22-Bit 






E Instruction 




a 

S Ml 


M2 


M3 


Program Mnemonics 


DES Subroutine 






c2 


If 





:00 LDDES CKDES CKKEY 


1 42 


10 


5 


:01 CKDES CKKEY LLC 5 


2 52 


11 


2 


:02 CKDES SHFT2 CKKEY ILC 02 


3 42 


10 


5 


CKDES CKKEY LLC 5 


4 52 


11 


4 


:03 CKDES SHFT2 CKKEY ILC 03 


5 42 


13 





CKDES CKKEY RET 


Load Initial Value 






6 1 


b 


3 


B6 IO LDMP ACT 
DES INPUT = ISR OSR INPUT = DESC 
IV INPUT = ISR LATCH INPUT = ISR 


7 1 


la 





CLISRF ADD 


8 


15 


8 


:10 ISRFT? 10 


9 


3c 





WIV CLEAR 


a 


14 


a 


:20 GTO 20 



11 



14 



B6 IO LDMP ACT 
DES INPUT = ISR OSR INPUT = DESOUT 
IV INPUT = ISR LATCH INPUT = ISR 

:25 CLISRF ADD 

:30 ISRFT? 30 

WKEY CLEAR 

:40 GTO 40 



B6 IO LDMP SERIAL ACT 
DES INPUT - ISR OSR INPUT = DESOUT 
IV INPUT = ISR LATCH INPUT = ISR 

GTO 25 



Figure 5. ROM Programs (Part 1 of 2) 
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A 

D 

D 

R 22-Bit 

E Instruction 

S 

S Ml M2 M3 Program Mnemonics 



ECB Encrypt or Decrypt 

12 1 c B6 CLEAR 

DES INPUT = ISR OSR INPUT = DESOUT 
IV INPUT = ISR LATCH INPUT - ISR 

LDKEY CKKEY CLISRF LT? 100 

CKKEY SROL SHFTR 

:100 ISRFT? 100 

CLISRF LDDES CKDES CKKEY SUB 01 

ISRFOSRET? 120 

:110OSRET? 110 

CLOSRE CKOSR GTO 100 

:120 CLISRF CLOSRE CKOSR LDDES CKDES CKKEY SUB 01 

:130 ISRFOSRET? 120 

GTO 110 



13 


7 


18 


15 


14 


2 


19 


1 


15 





15 


15 


16 


c3 


12 


1 


17 





17 


la 


18 





16 


18 


19 





d4 


15 


la 


c3 


d2 


1 


lb 





17 


la 


lc 





14 


18 



Figure 5. ROM Programs (Part 2 of 2) 
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A 








D 








D 








R 




22-Bit 




E 


Instruction 


§ 








S 


Ml 


M2 


M3 


CBC Encrypt 




20 


3 


c 





21 


7 


18 


23 


22 


2 


19 


1 


23 





15 


23 


24 


c3 


12 


1 


25 


13 


4 


2c 


26 





15 


26 


27 


c3 


12 


1 


28 





17 


2b 


29 





16 


29 


2a 





d4 


26 


2b 


c3 


d2 


1 


2c 





17 


2b 


2d 





14 


29 


CBC Decrypt 




2e 


7 


lc 





2f 


59 


48 


31 


30 


2 


19 


1 


31 





15 


31 


32 


e3 


12 


1 


33 





17 


36 


34 





16 


34 


35 





f4 


31 


36 


e3 


f2 


1 


37 





17 


36 


38 





14 


34 



Program Mnemonics 



S5A B6 CLEAR 

DES INPUT = ISR A IV OSR INPUT = DESOUT 

IV INPUT = ISR LATCH INPUT = ISR'IV 
LDKEY CKKEY CLISRF LT? 200 
CKKEY SROL SHFTR 
:200 ISRFT? 200 

CLISRF LDDES CKDES CKKEY SUB 01 
:210 S3 S5A B6 GTO 130 

DES INPUT = ISR^DESOUT OSR INPUT = DESOUT 

IV INPUT = ISR LATCH INPUT = ISR'DESOUT 
:100 ISRFT? 100 

CLISRF LDDES CKDES CKKEY SUB 01 
ISRFOSRET? 120 
:110OSRET? 110 
CLOSRE CKOSR GTO 100 

:120 CLISRF CLOSRE CKOSR LDDES CKDES CKKEY SUB 01 
:130 ISRFOSRET? 120 
GTO 110 



LDKEY CKKEY CLISRF CLEAR 
B2 S3 S4 B6 B13 LT? 250 

DES INPUT = ISR OSR INPUT = IV'DESOUT 

IV INPUT = Qn LATCH INPUT = ISR 
CKKEY SROL SHFTR 
:250 ISRFT? 250 

CLISRF CKL LDDES CKDES CKKEY SUB 01 
ISRFOSRET? 230 
:220 OSRET? 220 
CLOSRE CKOSR WIV GTO 250 

:230 CLISRF CKL WIV CLOSRE CKOSR LDDES CKDES CKKEY SUB 01 
ISRFOSRET? 230 
GTO 220 



Figure 6. Assembly Language Listing for CBC Mode 
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A 




D 




D 




m 


22-Bit 


E 


Instruction 


s 




s 


Ml M2 1 



21 


7 


12 





22 


lb 


4 


24 


23 


e3 


d2 


1 


24 





17 


23 


25 





14 


24 



M3 Program Mnemonics 

64-bit CFB Encrypt 

20 Id c S3 S4 S5B B6 CLEAR 

DES INPUT = IV OSR INPUT = ISR'DESOUT 

IV INPUT - ISR LATCH INPUT = IV 
LDKEY CKKEY CLISRF SUB 00 
S3 S4 S5A B6 GTO 102 

DES INPUT - ISR'DESOUT OSR INPUT = ISR'DESOUT 

IV INPUT = ISR LATCH INPUT = ISR'DESOUT 
:101 LDDES CKDES CKL CKKEY CLISRF CLOSRE CKOSR SUB 01 
:102 ISRFOSRET? 101 
GTO 102 

64-bit CFB Decrypt 

26 Id c S3 S4 S5B B6 CLEAR 

DES INPUT = IV OSR INPUT = ISR'DESOUT 
IV INPUT = ISR LATCH INPUT = IV 

27 7 12 LDKEY CKKEY CLISRF SUB 00 

28 19 4 24 S3 S4 B6 GTO 102 

DES INPUT = ISR OSR INPUT = ISR'DESOUT 
IV INPUT = ISR LATCH INPUT = ISR 

8-bit CFB Encrypt 

29 Id b 10 S3 S4 S5B B6 IO 8BIT 

DES INPUT = IV OSR INPUT = ISR A DESOUT 

IV INPUT = ISR LATCH INPUT = IV 
2a 27 12 CKL LDKEY CKKEY CLISRF SUB 00 

2b la 84 24 S3 S4 S5A A6 GTO 102 

DES INPUT = Qn< <8 1 1 ISR'DESOUT OSR INPUT = ISR'DESOUT 

IV INPUT = ISR LATCH INPUT = Qn<<8 1 1 ISR'DESOUT 

Figure 7. Assembly Language Listing for 1-, 8-, and 64-Bit CFB Modes 
(Part 1 of 2) 
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A 

D 

D 

R 22-Bit 

E Instruction 

S 

S Ml M2 M3 Program Mnemonics 



8-bit CFB Decrypt 

2c Id b 10 S3 S4 S5B B6 IO 8BIT 

DES INPUT = IV OSR INPUT - ISR'DESOUT 

IV INPUT = ISR LATCH INPUT = IV 
2d 27 12 CKL LDKEY CKKEY CLISRF SUB 00 

2e 18 84 24 S3 S4 A6 GTO 102 

DES INPUT = Qn< < 8 1 1 ISR OSR INPUT = ISR'DESOUT 

IV INPUT = ISR LATCH INPUT - Qn< <8 1 1 ISR 

1-bit CFB Encrypt 

2f Id b 8 S3 S4 S5B B6 IO 1BIT 

DES INPUT = IV OSR INPUT = ISR A DESOUT 
IV INPUT = ISR LATCH INPUT = IV 

30 27 12 CKL LDKEY CKKEY CLISRF SUB 00 

31 la 4 24 S3 S4 S5A GTO 102 

DES INPUT = Qn< < 1 1 1 ISRADESOUT OSR INPUT - ISR'DESOUT 
IV INPUT = ISR LATCH INPUT = Qn< < 1 1 1 ISRADESOUT 

1-bit CFB Decrypt 

32 Id b 8 S3 S4 S5B B6 IO 1BIT 

DES INPUT = IV OSR INPUT - ISR'DESOUT 
IV INPUT = ISR LATCH INPUT - IV 

33 27 12 CKL LDKEY CKKEY CLISRF SUB 00 

34 18 4 24 S3 S4 GTO 102 

DES INPUT = Qn< < 1 1 1 ISR OSR INPUT = ISR'DESOUT 
IV INPUT = ISR LATCH INPUT - Qn< < 1 1 1 ISR 

Figure 7. Assembly Language Listing for 1-, 8-, and 64-Bit CFB Modes 
(Part 2 of 2) 
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A 

D 

D 

R 22-Bit 

E Instruction 

S 

S Ml M2 M3 Program Mnemonics 



OFB Encrypt and Decrypt 

20 Id c S3 S4 S5B B6 CLEAR 

DES INPUT = IV OSR INPUT = ISR'DESOUT 

IV INPUT = ISR LATCH INPUT = IV 
LDKEY CKKEY CLISRF SUB 00 
SI S3 S4 GTO 102 

DES INPUT = DESOUT OSR INPUT = ISR'DESOUT 

IV INPUT - ISR LATCH INPUT = Qn< < 1 1 1 ISR 
:101 LDDES CKDES CKL CKKEY CLISRF CLOSRE CKOSR SUB 01 
:102 ISRFOSRET? 101 
GTO 102 



21 


7 


12 





22 


98 


4 


24 


23 


e3 


d2 


1 


24 





17 


23 


25 





14 


24 



Figure 8. Assembly Language Listing for OFB Mode 
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A 

D 

D 

R 22=B5t 

E Instruction 

S 

S Ml M2 M3 Program Mnemonics 

Subroutine for ECB with 3 Keys 

20 19 :20SROLSHFTL 

21 c6 18 24 LDDES CKDES LDKEY CKKEY LT? 25 

22 2 If CKKEY 

23 19 1 SROLSHFTR 

24 2 14 1 :25 CKKEY GTO 01 

3 Key ECB Encrypt 

/* 

25 1 lc CLISRF CLEAR 

26 1 a 1 :100 B6 ADD INT 

DES INPUT = ISR OSR INPUT - DESOUT 
IV INPUT = ISR LATCH INPUT = ISR 

27 15 27 :110ISRFT? 110 

28 1 12 20 CLISRF SUB 20 

29 81 a 3 B6 SI ADD INT ADD0 

DES INPUT = DESOUT OSR INPUT = DESOUT 
IV INPUT = ISR LATCH INPUT = ISR 

2a 12 20 SUB 20 

2b la 5 ADD INT ADD1 

2c 12 20 SUB 20 

2d 16 2d :140 OSRET? 140 

2e d4 26 CLOSRE CKOSR GTO 100 

3 Key ECB Decrypt 

2f 1 lc CLISRF CLEAR 

30 1 a 5 :200 B6 ADD INT ADD1 

DES INPUT = ISR OSR INPUT = DESOUT 
IV INPUT = ISR LATCH INPUT = ISR 

31 15 31 :210 ISRFT? 210 

32 1 12 20 CLISRF SUB 20 

33 81 a 3 B6 SI ADD INT ADD0 

DES INPUT - DESOUT OSR INPUT = DESOUT 
IV INPUT = ISR LATCH INPUT = ISR 

34 12 20 SUB 20 

35 la 1 ADD INT 

36 12 20 SUB 20 

37 16 37 :240 OSRET? 240 

38 d4 30 CLOSRE CKOSR GTO 200 



Figure 9. Assembly Language Listing for the ECB Mode Using 3 Keys 
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Instruction Set 



M1 



M2 



M3 



A/" 



"V ' \ 

7 , 6 . 5 . 4 . 3,2, 1.0. 7, 6,5 4 3,2,1,0 7,6 5,4,3,2,1,0 



I I I I I I I I I I 




I II I I 



CLOCK COMMANDS 



1 



MULTIPLEXER SETTINGS 



CONDITIONAL 
INSTRUCTIONS 



CONDITIONAL 

ARGUMENT 



Figure 10. 22-Bit Instruction Diagram 

Bytes Ml, M2, and M3 constitute a 22-bit instruction. Bit 4 of byte M2 determines which set of 
instructions will be used in bits 0-7 of byte Ml and bits 5-7 of byte M2. If bit 4 of byte M2 is high 
(1), the clock command instructions are used. If this bit is low (0), the multiplexer setting instructions are 
used. 

Bits 0—3 of byte M2 are decoded to one of thirteen conditional instructions. With the exception of RET 
and CLEAR, these instructions use the third byte, M3, as an argument. A description of each instruction 

is given in Table 6. 

The timing diagram for the instruction set is shown on Figure 14. An instruction is executed every two 
clock cycles. The ciphering rate may be computed by multiplying the number of instructions in the 
ciphering operation by twice the CLKIN period. 
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Table 6. Instruction Set (Part 1 of 3) 


Clock Commands (M2, Bit 4 = 1) 


Byte 


Bit 


Mnemonic 


Instruction 


Ml 


7 


LDDES 


Enables the DES multiplexer to receive the output from MUX 1 when 
high or from the DES itself when low. 


Ml 


6 


CKDES 


Clocks the DES L and R registers. 


Ml 


5 


CKL 


Clocks the latch register. 


Ml 


4 


SHFT2 


Enables the key circuitry to rotate 2 positions when high and 1 position 
when low. 


Ml 


3 


WKEY 


Latches the key register currently addressed. 


Ml 


2 


LDKEY 


Enables the key schedule C and D registers to be loaded from the 
addressed key register when high. When low, the contents of the C and 
D registers may be rotated 1 or 2 positions, left or right, depending on 
the state of the instructions SHFT2, SROL, and CKKEY. These two 
registers are used in the key schedule generation for the DES 
algorithm. 


Ml 


1 


CKKEY 


Clocks the key schedule C and D registers. 


Ml 





CLISRF 


Clears the ISRFULL flag and allows data to be written into the ISR. 


M2 


7 


CLOSRE 


Clears the OSREMPTY flag and allows data to be read from the OSR. 


M2 


6 


CKOSR 


Clocks the output from MUX 4 into the OSR. 


M2 


5 


WIV 


Writes the output of MUX 13 into the initial value memory. 



Table 6. Instruction Set (Part 2 of 3) 


Multiplexer Settings (M2, Bit 4 = 0) 


Byte 


Bit 


Mnemonic 


Instruction 


Ml 


7 


SI 


Selects the input line for MUX 1. A low selects input line 0; a high 
selects input line 1. 


Ml 
Ml 


6 

5 


B2 

A2 


Select the input line for MUX 2. 
B2 A2 Input Line 



1 1 

1 2 

1 1 Illegal 
An error occurs if both B2 and A2 are high (1). 


Ml 


4 


S3 


Selects the input line for MUX 3. A low selects input line 0; a high 
selects input line 1. 


Ml 


3 


S4 


Selects the input line for MUX 4. A low selects input line 0; a high 
selects input line 1. 
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Table 6. Instruction Set (Part 2 of 3 - Continued) 


Multiplexer Settings (M2, Bit 4 = 0) 


Byte 


Bit 


Mnemonic 


Instruction 


Ml 

Ml 


2 
1 


S5B 

S5A 


Select the input line for MUX 5. 
S5B S5A Input Line 


1 1 

1 2 

1 1 Illegal 
An error occurs if both S5B and S5A are high (1). 


Ml 

M2 




7 


B6 
A6 


Select the input line for MUX 6. 
B6 A6 Input Line 



1 1 

1 2 

1 1 Illegal 
An error occurs if both B6 and A6 are high (1). 


M2 
M2 


6 

5 


B13 
A13 


Select the input line for MUX13. 
B13 A13 Input Line 



1 1 

1 2 
1 1 3 



Table 6. Instruction Set (Part 3 of 3) 


Conditional Instructions 


M2, Bits 


Mnemonic 


Instruction 


3 


2 


1 

















LLC 


Loads the loop counter with the least significant nibble in M3. 
There is only one loop counter. 











1 


ILC 


Decrements the loop counter and jumps to the address in M3 if the 
loop counter is not zero. 








1 





SUB 


The current program counter instruction address is incremented and 
latched before the program jumps to the address specified by M3. 
Only one level of subroutine call is allowed. 








1 


1 


RET 


Return from subroutine. The program jumps to the address latched 
when the preceding SUB command was executed. 





1 








GTO 


The program jumps to the address in M3. 





1 





1 


ISRFT? 


If the ISR is not full, the program jumps to the address specified by 
M3. 





1 


1 





OSRET? 


If the OSR is not empty, the program jumps to the address specified 
by M3. 





1 


1 


1 


ISRFOSRET? 


If the ISR is full and the OSR is empty, the program jumps to the 
address specified by M3. 


1 











LT? 


If bit 7 of the port configuration register is low, the program jumps 
to the instruction address in M3. This bit may be used to select the 
order in which the key schedule is used (encrypt or decrypt) . 
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Table 6. Instruction Set (Part 3 of 3 - Continued) 


Conditional Instructions (Continued) 


M2, Bits 


Mnemonic 


M3, Bit 


Mnemonic 


Imstrectiomi 


3 


2 


1 





1 


1 


1 


1 


UI 


— 


— 


Unconditional increment to next instruction. 


1 


1 





1 


— 


— 


— 


Not used. 


1 


1 


1 





— 


— 


— 


Not used. 


1 








1 


SROL 


0= 1 


SHFTR 


Latches a right key schedule rotation. 


= 


SHFTL 


Latches a left key schedule rotation. 


1 





1 





ADD 


2 
1 


ADDl 
ADDO 


Latches the key /initial value register address. 
ADDl ADDO Reg Pair 



1 1 

1 2 
1 1 3 





INT 


A high specifies the internal key /initial value 
address bus; a low specifies the key /initial 
value address specified by bits and 1 of the 
status register. 


1 





1 


1 


IO 


5 


SISRFOSRE 


A high sets both the ISRFULL flag and the 
OSREMPTY flag active. 


4 
3 


8BIT 
IBIT 


Selects 1-, 8-, or 64-bit CFB mode. 
1-Bit 8-Bit CFB Mode 

64-Bit 

1 8-Bit 

1 1-Bit 
1 1 Illegal 


2 


SERIAL 


Sets the key circuitry for a serial key input 
when high, and parallel key input when low. 


1 


LDMP 


A high sets the input circuitry to receive 
data from the master port regardless of the 
conditions programmed in the port 
configuration register. 





ACT 


A high sets the ACTIVE flag in the status 
register and output pin 32 goes high. 


1 


1 








CLEAR 


NA 


NA 


Initializes control logic in the DEP. 
Specifically, this instruction sets the 
following bits low: ACT, LDMP, SERIAL, 
IBIT, 8BIT, INT, ADDO, ADDl, SHFTL, 
SHFTR. This instruction is typically used in 
the first line of a program. 



NA — Not applicable. 
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CHARACTERISTICS 

Clocks 

CLKIN: 10 kHz to 8 MHz 
SKCLK: 10 kHz to 1.6 MHz 

On-Chip Memory 

ROM: 29 x 22 bits (hex address 00- 1C) 
RAM: 32 x 22 bits (hex address 20-3F) 



ROM Address Map 


Address 


Program 


00 
06 
0B 
10 
12 


DES hardware subroutine 
Load initial value 
Parallel load key 
Serial load key 
ECB Encrypt or Decrypt 



Electrical CBnaffactenstks 
TA = to 70 °C, VDD = 5 V ± 10%, VSS = V 



Parameter 


Symbol 


Min 


Typ 


Max 


Unit 


Test Conditions 


Supply Current 


IDD 


— 


— 


90 


mA 


°C, VDD = 5.5 V 


Input Voltage Low 
High 


VIL 


— 


— 


0.8 


V 




VIH 


2.0 


— 


— 


V 




Output Voltage Low 
High 


VOL 


— 


— 


0.4 


V 


IOL = 1.6 mA 


VOH 


2.4 


— 


— 


V 


IOH = 400 nA 


Power Dissipation 


PD 


— 


0.3 


0.5 


w 


°C, VDD = 5.5 V 


— 


— 


0.4 


w 


70 °C, VDD = 5.5 V 



Maximum Ratings 

Voltage range on any pin with respect to ground (VSS) —0.5 to VDD + 0.5 V 

Storage Temperature Range (Tstg) —65 to +125 °C 

Maximum ratings are the limiting conditions that can be applied under all variations of circuit and 
environmental conditions without the occurrence of permanent damage. 

External leads can be bonded or soldered safely at temperatures up to 300 °C. 
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Timing Characteristics 


Symbol 


Description 


Mlm 


Max 


UmftS 


tAVRL 


Address Set-Up 
Time (Read) 


70 


— 


ns 


tAVWL 


Address Set-Up 
Time (Write) 


70 


— 


ns 


tCLKINHCLKINH 


CLKIN Period 


0.125 


100 


/AS 


tDVWH 


Data Valid to Write 
Pulse Rising Edge 


80 


— 


ns 


tPCHPCH 


Instruction Period 


2tCLKINHCLKINH 


— 


ns 


tRHDX 


Read Pulse to Data 
Bus Float 


— 


80 


ns 


tRHFLGH 


Last Read Pulse to 




80 


ns 


Rising MFLG or 
SFLG 


tRHRH 


MPRor 
SPR Period 


2tCLKINHCLKINH 


— 


ns 


tRLDV 


Read Pulse to Data 
Valid 


— 


70 


ns 


tSKCLKHSKCLKH 


SKCLK Period 


0.625 


— 


/IS 


tSKCLKLSKDX 


Serial Key Data 
Hold Time 


70 


— 


ns 


tSKCLKLSKREQH 


Last Falling Serial 
Key Clock to Rising 
Serial Key Request 




4tCLKINHCLKINH 
+ tWHFLGH 


ns 


tSKDVSKCLKL 


Serial Key Data 
Set-up Time 


70 


— 


ns 


tSKREQLSKCLKL 


Serial Key Request 
to First Falling 
Serial Key Clock 


4tCLKINHCLKINH 




ns 


tWHDX 


Write Pulse Data 
Hold 


15 


— 


ns 


tWHFLGH 


Last Write Pulse to 


— 


60 


ns 


Rising MFLG or 
SFLG 


tWHWH 


MPWor 
SPW Period 


2tCLKINHCLKINH 


— 


ns 



Timing Diagram Nomenclature 


Term 


Definition 


Term 


Definition 


Term 


Definition 


ADR 

CD 

MD 


Address 
Cipher Data 
Mode Data 


MID 
M2D 
M3D 


Ml Data 
M2 Data 
M3 Data 


PD 
SD 
UD 


Port Data 
Status Data 
Unciphered Data 
(Plain Text) 
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Timing Diagrams 
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CO 


r^- 


13 


iq: 


1^- 
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«c 


CL 


°- 
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SE 


i 
o 

Q_ 


SE 
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o 
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a 
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i 
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o 





a 




cd 




43 




bo 








43 
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Outline Diagram 



INDEX MARK 



INDEX AREA 




.125" MIN 

3.17 mm 



SEATING 
PLANE 



U_ 



H 



165 MAX 

4.19mm 



J_J. 



.100 

2.54 mm 



X_.015" MIN 

.38 mm 




NOTES : MEETS JEDEC STANDARDS. 

INDEX MARK MAY BE SEMICIRCULAR NOTCH OR CIRCULAR DIMPLE LOCATED IN INDEX AREA. 
INDEX MARK MAY BE CIRCULAR DIMPLE LOCATED IN INDEX AREA. 




ORDERING INFORMATION 



Device Code 


Package 


Temperature 


T7000A-PC 


40-Pin Plastic DIP 


to 70 °C 



For additional information contact your AT&T Account Manager, or call: 

□ AT&T Technologies, 555 Union Boulevard, Dept. 50AL203140, Allentown, PA 18103 
1-800-372-2447 

In Europe, contact: 

□ AT&T Microelectronics, Freischiitzstrasse 92, 8000 Munchen 81, West Germany 
TeL 89/95 97 or Telex 5 216 884 



. OIO" 

. 25 mm 



Printed in United States of America 
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